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^^ , Abstract 

CN. 

In this paper we study spread codes: a family of constant-dimension codes for random 

C ■ linear network coding. In other words, the codewords are full-rank matrices of size k x n 

, ^ ■ with entries in a finite field F,. Spread codes are a family of optimal codes with maximal 

minimum distance. We give a minimum-distance decoding algorithm which requires 0{{n — 

>D . k)k^) operations over an extension field F^fc . Our algorithm is more efficient than the previous 

ones in the literature, when the dimension k of the codewords is small with respect to n. The 

L^ , decoding algorithm takes advantage of the algebraic structure of the code, and it uses original 

results on minors of a matrix and on the factorization of polynomials over finite fields. 



1 Introduction 



^. . Network coding is a branch of coding theory that arose in 2000 in the work by Ahlswede, Cai, 

^f\ ' Li and Yeung [ACLYOO . While classical coding theory focuses on point-to-point communication, 

fS| ■ network coding focuses on multicast communication, i.e., a source communicating with a set of 

lO ■ sinks. The source transmits messages to the sinks over a network, which is modeled as a directed 

^j . multigraph. Some examples of multicast communication come from Internet protocol applications 

C*^ ■ of streaming media, digital television, and peer-to-peer networking. 

^^ . The goal in multicast communication is achieving maximal information rate. Informally, this 

corresponds to maximizing the amount of messages per transmission, i.e., per single use of the 
network. Li, Cai and Yeung in JLYC03J prove that maximal information rate can be achieved in 
multicast communication using linear network coding, provided that the size of the base field is 
large enough. 
^ ■ The algebraic aspect of network coding emerged with the work by Kotter and Kschischang 

5^ , [KK08b] . The authors introduced a new setting for random linear network coding: Given the 

linearity of the combinations, the authors suggest to employ subspaces of a given vector space as 
codewords. Indeed, subspaces are invariant under taking linear combinations of their elements. 
Let ^(F") be the set of all Fq-linear subspaces of F" They show that 7^(F") is a metric space, 
with distance 

d{U, V) = dim(W + V) - dim(W n V) for all U,V e P(F^). 

Kotter and Kschischang define network codes to be subsets of 7^(F"). In particular, they define 
constant-dimension codes as subsets, whose elements have all the same dimension. Notions of 
errors and erasures compatible with the new transmission model are introduced in [KKOSbj . In 
addition, upper and lower bounds for the cardinality of network codes are established in |KK08b[ 
IEV08] . 
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tThe author was partially supported by the Swiss National Science Foundation under grants no. 126948 and no. 
135934. 

-fThe author was partially supported by the Swiss National Science Foundation under grant no. 126948. 



We review here some of the constructions of constant-dimension codes present in the Utera- 
ture. The first one is introduced by Kotter and Kschischang in f KK08b| . The construction uses 
evaluation of hnearized polynomials over a subspace. The codes that one obtains are called Reed- 
Solomon-like codes, because of the similarities with Reed-Solomon codes in classical coding theory. 
Due to their connection with the rank- metric codes introduced in [Gab85', these codes are also 
called lifted rank-metric codes. Kotter and Kschischang devise a list-1 minimum-distance decoding 
algorithm for their codes. Spread codes, which are the subject of this paper, were first introduced 
by the authors in [MGROS] . Spread codes contain the codes with maximal minimum distance 
in [KKOSbj . Another family of network codes, based on g-analogs of designs, appears in IKK08a| . 
Aided by computer search, the authors find constant-dimension codes based on designs with big 
cardinality. Another family of codes is constructed in |ES09] . The construction builds on that of 
Reed-Solomon-like codes, and the codes that the authors obtain contain them. The construction 
is also based on binary constant-weight codes, Ferrer diagrams, and rank-metric codes. The pro- 
posed decoding algorithm operates on two levels: First one decodes a constant-weight code, then 
one applies a decoding algorithm for rank-metric codes. In jSkal O Skachek introduces a family of 
codes, that is a sub- family of the one in |ES09] . In |MV10) the authors introduce another family 
of codes, which they obtain by evaluating pairs of linearized polynomials. The codes obtained can 
be decoded via a list decoding algorithm, which is introduced in the same work. 

This work focuses on spread codes which are a family of constant-dimension codes first intro- 
duced in |MGR08| . Spreads of F^ are a collection of subspaces of F^, all of the same dimension, 
which partition the ambient space. Such a family of subspaces of F" exists if and only if the 
dimension of the subspaces divides n. The construction of spread codes is based on the Fg-algebra 
Vq[P\ where P G GLkiVq) is the companion matrix of a monic irreducible polynomial of degree k. 
Concretely, we define spread codes as 

Sr = {rowsp(Ai ••• A^) e ©F,(fc,?^) Mi e Fq[P] for aU i € {1, . . . , r}} 

where 0Fg(^, n) is the Grassmannian of all subspaces of F" of dimension k. 

Since spreads partition the ambient space, spread codes are optimal. More precisely, they have 
maximum possible minimum distance 2fc, and the largest possible number of codewords for a code 
with minimum distance 2k. Indeed, they achieve the anticode bound from |EV08j . This family is 
closely related to the family of Reed-Solomon- like codes introduced in [KK08b| . We discuss the 
relation in detail in Section 1^?^ In Lemma [T71 we show how to extend to spread codes the existing 
decoding algorithms for Reed-Solomon-like codes and rank-metric codes. 

The structure of the spreads that we use in our construction helps us devise a minimum-distance 
decoding algorithm, which can correct up to half the minimum distance of Sr ■ In Lemma [25] we 
reduce the decoding algorithm for a spread code 5,- to at most r — 1 instances of the decoding 
algorithm for the special case r = 2. Therefore, we focus on the design of a decoding algorithm 
for the spread code 

S = $2 = {rowsp(^i A2) e ©F,(fc,2A:) 1^1,^2 5 FJP]} . 



The paper is structured as follows. In Section[2]we give the construction of spread codes, discuss 
their main properties. In Subsection 12.11 wc introduce the main notations. In Subsection 12.21 we 
discuss the relation between spread codes and Reed- Solomon-like codes, which is given explicitly 
in Proposition (TSl Proposition [TH] shows how to apply a minimum- distance decoding algorithm 
for Reed-Solomon-like codes to spread codes, and estimates the complexity of decoding a spread 
code using such an algorithm. 

The main results of the paper are contained in Section [3] In Subsection 13.11 we prove some 
results on matrices, which will be needed for our decoding algorithm. Our main result is a 
new minimum-distance decoding algorithm for spread codes, which is given in pseudocode as 
Algorithm [21 The decoding algorithm is based on Theorem [M] where we explicitly construct the 
output of the decoder. Our algorithm can be made more efficient when the first k columns of the 



received word are linearly independent. Proposition [551 and Corollary 1361 contain the theoretical 
results behind this simplification, and the algorithm in pseudocode is given in Algorithm[3] Finally, 
in Section 2] we compute the complexity of our algorithm. Using the results from Subsection 12.21 
we compare it with the complexity of the algorithms in the literature. It turns out that our 
algorithm is more efficient than the all the known ones, provided that k ^ n. 

2 Preliminaries and notations 

Definition 1 ( |Hir98i Section 4.1]). A subset S* C 0f {k,n) is a spread if it satisfies 
• UnV ^ {0} for all U,V e S distinct, and 

Theorem 2 (^ |Hir981 Theorem 4.1]). A spread exists if and only if k \n. 

In [MGR08J we give a construction of spreads suitable for use in Random Linear Network 
Coding (RLNC). Our construction is based on companion matrices. 

Definition 3. Let F^ be a finite field and p = X]i=oP»-^* ^ ^gW ^ monic polynomial. The 
companion matrix of p 

/ 1 ••• \ 

1 



P 






1 

\-P0 ~Pl ~P2 ■ ■ ■ -Pk-lJ 

Let n = rk with r > 1, p G Fg[x] a monic irreducible polynomial of degree k and P G F^^*^ its 
companion matrix. 

Lemma 4. The ¥ q-algehra Vq[P] is a finite field, i.e., Fq[P] ^ F^t . 

This is a well-known fact (see [LN941 page 64]). 

Lemma 5. Let if : ¥„k — > Fq[P] he a ring isomorphism. Denote by 

P'-1(F,.):=(F;.\{0})/-^ 
the projective space, where '^ is the following equivalence relation 

V ^ w <F=^ 3X G F*fc such that v — Xw, 
where v,w € ¥^\ \ {0}. Then the map 

(^: P'-i(Fg.) ^ (SF,(fc,7i) 

[vi : ■ ■ ■ : Vr] tH- rowsp ('/'(I'l) • • • f{vr)) ■ 

is injective. 

Proof. Let V = [vi : ■ ■ ■ : Vr],w = [wi : ■ ■ ■ : Wr] G F^^^{¥qk). If (fi{v) — (^(w) there exists an 
M G GLfe(Fq) such that 

{ip{vi) ■■■ ifiiVr)) = M (ip{wi) ■■■ (p{Wr)) 

= {Mifiwi) •■• MifiWr)) (1) 

Let iv,iw G {l,...,r} be the least indices such that ip{vi^) ^ and ip{wi^) ^ 0. From ([T]) it 
follows that iy — iw Since, without loss of generality, we can consider Vi^ — Wi^ = 1, it follows 
that f{vi^) = ifiwi^) = I and consequently M = I. Then, ([T]) becomes 

(<^(wi) ••• if{Vr)) = {ip{wi) ■■■ ip{Wr)) 

leading to v — w. □ 



Theorem 6 f |MGR08[ Theorem 1]). S^ :== (piP'-^iWgk)) is a spread ofF^ for n = rk. 

Definition 7 ( |MGR08l Definition 2]). We call spread codes of ©p {k,n) the subsets Sr C 
25f {k,n) from Theorem[6l 

Remark 8. Notice that 

Sr = {rowsp(^i ••• Ar) e'&w^{k,n)\Ai<E¥q[P] for alH e {1, . . . , r}} 

In order to have a unique representative for the elements of S^, we bring the matrices (^i • ■ • Arj 
in row reduced echelon form. 

Lemma 9 f [MGR08l Theorem 1]). Let S^ C ©f {k,n) he a spread code. Then 

1. d{U,V) = rfmin(Sr) — 2fc, for all hi ,V e S„ distinct, i.e., the code has maximal minimum 
distance, and 

fi- |Sr| = '^k^i -■ *-S-; the code has maximal cardinality with respect to the given minimum dis- 
tance. 

Remark 10. In |TMR10) the authors show that spread codes are an example of orhit codes. 
Moreover, in |TRllj it is shown that some spread codes are cyclic orbit codes under the action of 
the cyclic group generated by the companion matrix of a primitive polynomial. 

Definition 11. A vector space 7?. G ©f {k,rk) is uniquely decodable by the spread code S^ C 
(Sw^{k,n) if 

there exists a C G S^ such that d{TZ, C) < '"'" — — ~ k. 

In Section|3]we devise a minimum-distance decoding algorithm for uniquely decodable received 
spaces. 

2.1 Further notations 

We introduce in this subsection the notation we use in the paper. 

Definition 12. Let s G N with s < k and denote by L§ ^ C F^n [x] the set of linearized polynomials 
of degree less than q''. Equivalently, f ^ L^ ^ if and only if / = TliIZo fi^'' fo'" some fi G Fq.i. 

In the rest of the work we denote g-th power exponents such as x^ with x^^^ . 

Let Fg be a finite field with q elements, and let p G Fg[x] be a monic irreducible polynomial of 
degree fc > 1. P G GLk{¥q) denotes the companion matrix of p, and S G GLk{¥qk) is a matrix 
which diagonalizes P. 

We denote by A(x) :— diag(a;, x'^' , . . . ,x^''~^^) G Fq[a;]'^^'^ a diagonal matrix, whose entry in 
position (i + l,i + I) is a;'*' for i = 0, . . . , fc — 1. 

Let M be a matrix of size k x k and let J — (ji, . . . ,js), L — (Zi, . . . , Z^) G {1, . . . , fc}". [J; L]m 
denotes the minor of the matrix M corresponding to the submatrix {j;L^j^ with row indices 
j'l, . . . , js and column indices li, . . . ,ls. We skip the sufhx M when the matrix is clear from the 
context. 

We introduce some operations on tuples. Let K — (ii, . . . ,is) E {1, . . . , fc}*. 

• i G K means that i G {ii, . . . , is}- 

• L <Z K means that L ~ (ii-^ , . . . ,ii^) for 1 < li < ■ ■ ■ < l^ < s. 

• I A'l := s is the length of the tuple. 



• 



K J denotes the L C K,J such that lil is maximal. 



• If J ~ {ji, . . . ,jr) then I U J :— (ii, . . . ,is, ji, ■ • ■ , jr), i-e., U denotes the concatenation of 
tuples. 

• li J C K then K \ J denotes the L C K with \L\ maximal such that J n L = where is 
the empty tuple. 

• minK — min{i | i G K}, with the convention that min0 > minK for any K. 

We define the non diagonal rank of a matrix as follows. 
Definition 13. Let N e Fj^'^. We define the non diagonal rank of N as 

ndrank(A^) := min{t £ N | [ J, L]n = for all J,Le{l,..., fc}*, J n i = 0} - 1. 

At last, algorithms' complexities are expressed as 0{¥;p{n, fc)), which corresponds to perform- 
ing 0{p{n, fc)) operations over a field F, where n, k are given parameters. 

2.2 Relation with Reed-Solomon-like codes 

Reed-Solomon-like codes, also called lifted rank-metric codes, are a class of constant-dimension 
codes introduced in (KKOSbj . They are strictly related to maximal rank distance codes as intro- 
duced in jGab85) . We give here an equivalent definition of these codes. 

Definition 14. Let ¥q C F^n be finite fields. Fix some F^-linearly independent elements ai, . . . ,ak & 
FqTi. Let ip : Fgn — )► F" be an isomorphism of Fg-vector spaces. A Reed- Solomon-like (RSL) code 
is defined as 



RSL^ „ '■= \ rowsp 



/ ^(/(ai)) 
/ : 

V ^(/K)) 



f^Li^ ) ce^^ik,k + n). 



The following proposition establishes a relation between spread codes and RSL codes. The 
proof is easy, but rather technical, hence we omit it. 

Proposition 15. Let n = rk, Fg C F^k C F^n finite fields, and P £ GLk{Vq) the companion 
matrix of a monic irreducible polynomial p £ Fq[x] of degree fc > 0. Let A £ F„fc be a root of 
p, fii,...^pr £ ^qn a basis ofWqn overWqk. Moreover, let ip : ¥qn — !> F" be the isomorphism of 
¥q-vector spaces which maps the basis {X'pj)o<j<k-i to the standard basis ofWqn overWq. Then 

l<T<r 

for every choice of Aq, . . . , A^-i £ Fg[P] there exists a unique linearized polynomial of the form 
f — ax with a £ ¥qn such that 

( V'(.f(i)) \ 

V V(/(A^-i)) j 
The constant a is a — ^p^^{v) where v £ F" is the first row of (Aq ■ ■ ■ Ar-i). 

The proposition allows us to relate our spread codes to some RSL codes. The following corollary 
makes the connection explicit. We use the notation of Proposition [15] 



Corollary 16. For each I < i < r — 1, let ^i^i, . . . , fir-i.i be a basis oJ¥Mr-i)k over V^k. Let 



V'. :F, 



'^q denote the isomorphism of vector spaces that maps the basis (A-'/i;.i)o<j<A;-i 



to the standard basis of ¥q ' . Then 

Sr^[j I rowsp • • ■ / : 

'=1 [ V-i times i!^{f{\''-^)) 



KKr- 



f = ax, ae ¥^r-^)k 




Corollary [TBI readily follows frora Proposition [TS] 

The connection that we have established with RSL codes allows us to extend any niinimunr- 
distance decoding algorithm for RSL codes to a minimum-distance decoding algorithm for spread 
codes. We start with a key lemma. 

Lemma 17. Let S^ be a spread code, and TZ — rowsp (i?i • ■ • Rr) G ©Fg(fc,^) for some k < k. 
Assume there exists a C = rowsp (Ci • ■ • Cr) G S^ such that d{TZ,C) < k. Let 



min < j G {1, . . . , r} | rank(i?j) > 



fc-1 



It holds that: 



. C, = for l<j<i, 



• Ci = I , and 

• d(rowsp {Ri Ri+i 



Rr) , rowsp (/ Ci+i • • • Cr)) < k. 
Proof. The result follows from Lemma [28] and the obseryation that 
d{C, TZ) > d(rowsp {Ci ■ ■ ■ Cr) , rowsp (i?.; • ■ • 



Rr)). 



u 



In the next proposition, we use Corollary [THJ and Lemma [T7| to adapt to spread codes any 
decoding algorithm for RSL codes. In particular, we apply our results to the algorithms contained 
in jKKOSb] and |SKK08| . and we giye the complexity of the resulting algorithms for spread codes. 

Proposition 18. Any minimum- distance decoding algorithm for RSL codes may be extended to 
a minimum- distance decoding algorithm for spread codes. In particular, the algorithms described 
in ^KKOSbf and ]SKK08^ can be extended to minimum- distance decoding algorithms for spread 
codes, with complexities OiWqn-k'.n^) for the former and 0{¥qn-k; kin — k)) for the latter. 

Proof. Suppose we are given a minimum-distance decoding algorithm for RSL codes. We construct 
a minimum- distance decoding algorithm for spread codes as follows: Let TZ — rowsp (i?i • • • Rr) G 
©F^ (fc, n) be the received word, and assume that there exists a. C — rowsp (Ci • • • Cr) G S^ 
such that d{TZ, C) < k. First, one computes the rank of _Ri, i?2, • • • until one finds an i such that 
rank(i?i) > (fc — l)/2, rank(i?j) < (fc — l)/2 for j < i. Thanks to Lemma [T71 one knows that 
Cj — ioi j < i and Ci = I. Moreover, one has 

(i(rowsp (Ri Ri+i ■ • ■ Rr) , rowsp (/ C^+i 



Cr)) < k 



Therefore, one can apply the minimum-distance decoding algorithm for RSL codes to the received 
word rowsp {Ri Ri+i ■ ■ ■ Rr) in order to compute Ci+i, . . . , C^. 



Assume now that one uses as minimum- distance decoder for RSL codes cither the decoding 
algorithm from |KK08b| . or the one from f SKKOS) . The complexity of computing the rank of 
Ri, ... ,Ri hy computing row reduced echelon forms is 0{¥q; nk"^). The complexity of the decoding 
algorithm for RSL codes is ©(F^n-t ; ri^) for the one in jKKOSb] and ©(F^n-t ; k{n — k)) for the one 
in JSKK08] . The complexity of the decoding algorithm is the dominant term in the complexity 
estimate. D 

It is well known that RSL codes are strictly related to the rank-metric codes introduced 
in |Gab85) . Although the rank metric on rank-metric codes is equivalent to the subspace dis- 
tance on RSL codes, the minimum-distance decoding problem in the former is not equivalent to 
the one in the latter. In [SKK08] the authors introduced the Generalized Decoding Problem for 
Rank-Metric Codes, which is equivalent to the minimum-distance decoding problem of RSL codes. 
Decoding algorithms for rank-metric codes such as the ones contained in jGab85[ ILoi06l IRP04) 
must be generalized in order to be effective for the Generalized Decoding Problem for Rank-Metric 
Codes, and consequently, to be applicable to RSL codes. 

Another interesting application of Lemma 1171 allows us to improve the efhciency of the decoding 
algorithm for the codes proposed in [SkalOj . For the relevant definitions, we refer the interested 
reader to the original article. 

Corollary 19. There is an algorithm which decodes the codes from \SkalOf and has complexity 
0{¥q,^-k■,k{n-k)). 

The algorithm is a combination of LemmalTTland the decoding algorithm contained in [SKK08J . 
First, by Lemma [iTl one finds the position of the identity matrix. This reduces the minimum- 
distance decoding problem to decoding a RSL code, so one can use the algorithm from [SKK08) . 

3 The Minimum-Distance Decoding Algorithm 

In this section we devise a new minimum-distance decoding algorithm for spread codes. In the 
next section, we show that our algorithm is more efficient than the ones present in the literature, 
when n ^ k. 

We start by proving some results on matrices, which we will be used to design and prove the 
correctness of the decoding algorithm. 

3.1 Preliminary results on matrices 

Let F be a field and let m G F[yi, . . . ,ys] be a polynomial of the form m — J2uc(i s) ^uVu 
where yu ■= Ylueu V^' «(!:...,«) t^ 0- 
Lemma 20. The following are equivalent: 

1. The polynomial m decomposes in linear factors, i.e., 

«e(i,...,s) 

, 0,(l,....s)\(u) ^ 

where fiu = e F. 

0(1, ...,s) 

2. n holds 

a-uav = at/nya(i,...,s) (2) 

for all U, V such that \V\ == s — 1 and 

min ((1, ...,s)\V)<mm ((1, ...,s)\U). 



Proof. We proceed by induction on s. 

I => I li s — I, m is a linear polynomial. Let us now suppose the thesis is true for s — 1. Then 

a(i,...,s) Yl (y^ + Mi") = «(i,---,s)(ys + Ms) X! °-uyu 

ue{i,...,s) \c/c(i,...,s-i) 

where a(i_...^s_i) — 1 and the coefficients ajj with t/ C (1, . . . , s — 1) satisfy by hypothesis 
condition ([2]). The coefficients of to are au = af7\(s) if s G C^, and ajj = figau otherwise. 
Therefore we only need to prove that ([2]) holds for [/ G (l,...,s — 1). The equality is 
^ii,.. .,3)0-11 = 0(70(1, ...,s) hence it is trivial. 

I <= I The thesis is trivial for ,s = 1. Let us assume that the thesis holds for s — 1. We explicitly 
show the extraction of a linear factor of the polynomial. 



TO. 



E 



auyu 



E {ouyu + au\{i)yu\{i)) 



U<Z{l,...,s) 



UC{l,...,s) 



UQ{l,...,s) 



E [o-uyiyu\{i) 



ac/Q(2,...,s) 
"■{!.... .,s) 



yu\{i) 



\ 



2/1 



a(2,...,.) 



a(i,...,s) 
The thesis is true by induction. 



E '^uyu\{i) 



UC{1 s) 

> let/ 



/ 



D 



Let ¥[xi,j]i<ij<k be a polynomial ring with coefficients in a field F. Consider the generic 
matrix of size k x k 

/a;i,i ■•• xi^k^ 

M := : : 

\Xfc,l ■ • • Xk,k/ 

Denote by X5+1 C ^[xij]i<ij<n the ideal generated by all minors of size s + 1 of M, which do not 
involve entries on the diagonal, i.e., 

X«+i :=([J,i] \J,Le{i,...,ky+\ Jr\L^%). 

We establish some relations on the minors of M , modulo the ideal I5+1. 

Lemma 21. Let J = {ji, . . . ,jk),L = {li,...,lk) e {l,...,k}'', Js = iji,---,js), and Ls = 
{li,...Js). Then 



[J,;L,][J;L]= ^ i-lY+^+'[J,U {jt);L,U {ls+i)][J \ijt);L\ih+^)]. 



t=s+l 



Proof. Notice that if we consider as convention that [0; 0] — 1, i.e., when s = 0, we get the 
determinant formula. 



We proceed by induction on s. Let us consider the case when s = 1, i.e., [Ji; Li] — {xj-^,i-^j 
Then, 

k 

{x,,.i,)[J;L] = 5](-l)*+'a;,„,,a;,„,JJ\(j,);i\(/2)] 
t=i 
= ~Xji,iiXji,h[J \ ih); L\ (h)] 

k 

t=2 
k 

= Y.{-ir+\n,jt);{hM)][J\{jtYL\{h)] 

t=2 

+^ji,h[J'^ ih,h,h, ■ ■ ■ Jk)]- 

For s = 1 the thesis is true because [J; (Zi, Zi, Z3, . . . , Z^)] = since column li appears twice. 
Assume that the thesis is true for s — 1. 

k 
Let us now focus on the factor Xj^^i^^-^ [Jg] Ls] for r > s + 1, we get 

s 

Xj^,i^+AJs;Ls] = [Js u {jr);L, u {ls+i)]+J2i-'^Y^"xn,h^dJs \ (it) u {jr);Ls]. 

t=l 
By substitution it follows that 

k 

+ E(-i)*^'^'^^-'=+^ ( t-^- ^^H^ \ Ut); L \ (Ui)] + 

r=s+l / 

k 

s 

+ E(-i)*^'^'^^-Wi ([^. \ 0*);i^. \ iis)][J;L]) 
t=i 

where L = (li, . . . ,ls,ls, ls+2, ■ ■ ■ ,lk)- The repetition of column Is twice in L implies that [J; i] = 
The last equality follows from the induction hypothesis. C 

The following is an easy consequence of Lemma [5TJ 

Proposition 22. Let J, L d K ^ {1, . . . ,k) such that J n L = 0. Then 

[J,L][K,K]-[JU{iy,LumK\{i);K\ii)]^ E hi[J U (i) , L U (l)] el.+i, 

ieK\{ju{i)) 

with hi £ ¥[xij]i<i,j<k for any I ^ K \ {J U (i)). 



We now study the minors of a matrix of the form S ^NS where N £ F^^*^ and S has a special 
form, which we describe in the next lemma. 

Lemma 23. Let P G GLfe(Fq) to he the companion matrix of a monic irreducible polynomial 
p G Fg of degree k > 0, and let A G F^k be a root of p. Then the matrix 



S 



( 1 

A 

A2 



1 1 

Adl AM 

A2-[1] A2-[21 



1 \ 

A[fe-i] 



(3) 



\\^-^ \{k~V,\\\ y{k~\)\2\ ... y(k-\)\k-\\j 



diagonalizes P. 



Proof. The eigenvalues of the matrix P correspond to the roots of the irreducible polynomial 
p e ¥q[x]. If A G Fgfc is an element such that p{X) = 0, then p = n»*=o (2; - A^) by |LN94[ 
Theorem 2.4]. It is enough to show that the columns of S correspond to the eigenvectors of P. 
Let z G {0, . . . , fc — 1}, then 



f ], \ ( 



P 



y\(k-i)-[AJ 



Al'l 

XHi\ 



\ 



( 



v-E-roP.A^V 



ah 

A2-H 



\ 



U-E^:o^..A.)'V 



A2-H 



\\^\^j 



= Ai' 






\\(i^'^)V\j 



u 



We now establish some properties of S. 
Lemma 24. The matrices S and S^^ defined by ([3]) satisfy the following properties: 

1. the entries of the first column of S (respectively, the first row of S^^ ) form a basis of F^t 
over ¥q, and 

2. the entries of the {i + l)-th column of S (respectively, row of S^^) are the q-th power of the 
ones of the i-th column (respectively, row) for i — 1, . . . ,k — 1. 



Proof. The two properties for the matrix 5* come directly from its definition. By |LN94i Defini- 
tion 2.30] we know that there exists a unique basis {70, . . . , 7fc-i} of ¥gk over Fg such that 

where Trp ^ /p (a) := 1 + al^l + h a'*-'"-^! for a G F t . We have 



/ 70 



S-' 



7o 



71 

7?' 



7fc-i \ 
7fc_i 



. [fe-i] [fc-i] [fc-i] , 



□ 
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The next theorem and corollary will be used in Subsection 13.31 to devise a simplified minimum- 
distance decoding algorithm, under the assumption that the first k columns of the received vector 
space are linearly independent. 

Theorem 25. Let t < k and let N G F*^*^ and S* G F '^* be two matrices satisfying the following 
properties: 

• N has full rank, 

• the entries of the first column of S form a basis of¥„k over ¥q, and 

• the entries of the {i + l)-th column of S are the q-th power of the ones of the i-th column, 
fori = l,...,t-l. 



Then NS G Git(F^fc). 
Proof. Let 



N 



(nij) i<j<t and NS = (iy )i<i<t 



Let S :— {sij)i<:i<k 



( °i ) i<i<fc ■'^here si, . . . ,Sk G F^t form a basis of ¥gk over Fg. Then: 



[j-i] 



^ij •= 51 "''*'J = X! ^^^^l X! "''''^' 



1=1 



1=1 



since the entries of N are in Fg. Let t^ := X]i=i "-iiS; G Fgt , then 



/n rW 



NS 



T2 r{ 



[1] 



2 



yTp Tp 



[1] 



.[*-i] 



The elements ti , . . . , rt G Fgk are linearly independent over Fg . Indeed, the linear combination 



k t k 

i=l 1=1 i=l 



2^ 2^ a»ri« si 
1=1 \i=i / 



is zero only when X)i=i '^i'^-ji — for ? = !,...,<. Since N has full rank it follows that ai, . . . ,at 
must all be zero, leading to the linear independence of ri, ..., rt. 
Now let uq, . . . , at-i G Fgt be such that 



/ ao 



NS 



= 0, 



\at-i 



and consider the linearized polynomial / — X]i=o '^t^ ■ The elements ri, . . . , r^ are by assump- 
tion roots of /. Since / is a linear map, the kernel of / contains the subspace (ti, . . . , r^) C Fgfc. 



Therefore / is a polynomial of degree q with q different roots, then oq 



at-i = 0. n 



Corollary 26. Let S G GLk{¥qk) be the matrix specified in ^ and N G Fg^''. Then for any 
J,L C (1, . . . , /c) tuples of consecutive indices with \J\ — \L\ — rank(iV), one has [J; L]g-ij^g ^ 0. 



11 



Proof. Let t = rank(A^) and J, L C {1, . . . ,k) with \J\ = \L\ = t,\ct H = {1, . . . , t). Let A^i e F; 
and N2 G F*^*"' be matrices with full rank such that N — NiN2. One has 



kxt 

q 



[J,L]s-^NS — [JiL]s-^Ni-N2S — [J,H]s-ipf^[H,L] 



N2S- 



We can now focus on the characterization of the maximal minors of the matrix N2S. The 
following considerations will also work for the matrix S~^Ni considering its transpose. 

The minor [7J, L]n^s is the determinant of a square matrix obtained by multiplying N2 with 
the submatrix consisting of the columns of S indexed by L. Let L contain consecutive indices. By 
Lemma [Ml the submatrix of S that we obtain together with N2 satisfy the conditions of Theorem 
Uni It follows that [H, LJN^s^O- 

As a consequence we have that [J, i]s-ijvs 7^ when both J and L are tuples of consecutive 
indices. D 

The following is a reformulation of Corollary [26] for small rank matrices. 

Corollary 27. Let N e F^'^'" be a matrix such that rank(A^) < -^ and S E GLfe(F^fc) defined 
as in (|3]). Then for any choice J, L C (1, . . . , fc) of consecutive indices with \J\ = \L\ = rank(A'^), 

[J,L]s-iNS^O. 

In particular, 

ndrank(S'-^iV5) = rank(Af). 

3.2 The Decoding Algorithm 

In this subsection we devise an efhcient minimum-distance decoding algorithm for spread codes, 
and establish some closely related mathematical results. 

We start by reducing the minimum-distance decoding algorithm for S^ to at most r — 1 instances 
of the minimum-distance decoding algorithm for S2. Notice that the minimum-distance decoders 
for the case r = 2 can be run in parallel. 

Let TZ — rowsp (i?i • • • Rr) be a received space. We assume that 

1 < fc = rank(7^) < k. 
Algorithm [T] on page [T2I is based on the following lemma. 

Lemma 28. Let Sr be a spread code, and TZ ~ rowsp (i?i • • • Rr) G <3r^{k,rk). Assume there 
exists a C = rowsp (Ci • • • Cr) G S such that d{TZ, C) < k. It holds 

a=0 ^=^ rank(i?,)< -77^- 



Proof. I ^ I Let i e {1, . . . , r} be an index such that Ci — 0. By the construction of a spread code 
there exists a j e {1, . . . , r} with Cj = I. We claim that dim(C fl 7?,) > |. In fact, 

fc > dim C + dim 11-2 dim(C nil) = k + k - 2 dini(C n 7^). 
From the claim it follows that 

rankf^ M < rank ( ^^ ■" ^'^ ) = fc + fc - dim(C n 7^) < fc + ^. 
yRi RjJ \Iii ■ ■ ■ RrJ 2 

This proves that 

fc 
rank(i?j) < -. 
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I <!= I Let i 6 {1, . . . , r} be such that rank(i?i) < ^^ and assume by contradiction that Ci G IFq[P]' 
It follows that 

fc — 1 
dini(C n 7?.) < dim(rowsp(Ci) fl rowsp(i?i)) = dini(rowsp(i?i)) < — - — 

which contradicts the assumption that d{C, TZ) = k + k — 2 dim(C DTZ) < k. 



n 



Algorithm 1: Minimum-distance decoding algorithm: n — rk, r > 2 

input : 7^ = rowsp (-Ri ••• Rr) ^ &Wqik,rk), r > 2, 

P G GLfc(Fg) the companion matrix of p G ^q[x\ and 

S G GLk{¥„k) its diagonalizing matrix. 
output: C <E Sr C &w {k, rk) such that d{TZ,C) < k, if such a C exists. 
Let ri = rank(i?i) for i = 1, . . . , r; 

if ri < ^^ for alii £ {1, . . . , r} then 
I return there exists no C G S^ such that d{TZ, C) < k 
end 

Let j = min ji G {!,... r} | r^ > ^\; 

for i G {1, . . . , r} and ri < ^^ do 
I a = OGFj><'=; 
end 
for j < i < r and ri > -^^ do 

Run a minimum-distance decoding algorithm for r = 2 with input TZ = rowsp yRj Ri) , 
P and S; 

if minimum- distance decoding algorithm returns no C E S2 then 
return there exists no C G S^. such that d{TZ, C) < k; 
else let C, G F,[P] such that C = rowsp (/ Ci); 
end 
end 
return C — rowsp (Ci • • • Cr) . 



Because of Lemma 1281 we may now focus on designing a minimum-distance decoding algorithm 
for the case where n = 2k. For the remainder of this subsection, we consider the spread code 

S = S2 = {rowsp (/ A) \Ae ¥q[P]} U {rowsp (O /)} 

where / and are respectively the identity and the zero matrix of size k x k. 

Since a minimum-distance decoding algorithm decodes uniquely up to half the minimum dis- 
tance, we are interested in writing an algorithm with the following specifications: 

Input TZ = rowsp (i?i -R2) G ©f,(^, 2fc), 

P G GLk{¥q) the companion matrix of p G ¥q[x] and 
S G GLfe(F^fc) its diagonalizing matrix. 

Output C G S C ©F, (fc, 2fc) such that c^(7^, C) < ^ = fc, if such a C exists. 

We first give a membership criterion for spread codes. We follow the notation given at the 
beginning of this section. 

Proposition 29 f lMGROSl Lemma 5 and Corollary 6]). Let A G GLk{¥q) U {0}. The following 
are equivalent: 
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1. AeFJP]. 

2. S~^AS is a diagonal matrix. 

3. AP = PA. 

If this is the case, then S^^AS = A(A) for some A £ F^t. 

From the proposition, we get an efficient algorithm to test whether a received vector space is 
error-free. 

Corollary 30 f |MGR08[ Corollary 6], Membership Test). Let 7^ = rowsp (i?i R2) e ©f, {k, 2k). 
Then TZ € S if and only if either Ri G GLk{¥q) and S^^Ri R2S is diagonal or Ri = and 
R2GGLk(¥g). 

The following is an easy consequence of Lemma [5S1 It allows us to efficiently test whether the 
sent codeword was rowsp (O /) , or rowsp (I O) . 

Corollary 31. Let TZ = rowsp (i?i -R2) £ ©f, (fc,2fc) he a received space, and assume that it is 
uniquely decodahle. The following are equivalent: 

• rank(_Ri) < ^^, and 

• the output of a minimum- distance decoding algorithm is rowsp (O /) . 

The analogous statement holds for R2 . 

Because of Corollary [3TJ we can restrict our decoding algorithm to look for codewords of the 
form C = rowsp (/ A) where A G F^ [P] . Since there is an obvious symmetry in the construction 
of a spread code, we assume without loss of generality that 

fc — 1 
rank(i?i) > rank(i?2) > — 7: — ■ 

With the following theorem we translate the unique decodability condition into a rank condi- 
tion, and then into a greatest common divisor condition. 

Theorem 32. Let 7?. G 25f {k, n) be a subspace with 

fc — 1 
rank(i?i) > rank(i?2) > • 

The following are equivalent: 

• TZ is uniquely decodable. 

• There exists a unique /i G F^t such that 

T&nk{S-^RiSA{fj,) - S-^R2S) < '^—^ (4) 



• X - fj, ^ gcd(^i^[J;L]s-iR,sA{x)-s-^B.2S \J,Le {1, . . . , fc}L*2'J | ,a;W - xj , f( 



or some /i G 



¥gk. 



Proof TZ is uniquely decodable if and only if there exists a unique matrix X G Fg [P] such that 

k~l>d(n,C) = 2rank(i ^]-(k+~k) 

\Ri R2J 

= 2rankf;', r^ J^ r^ ] - (k + k) = 2va.-akiRiX - R2) + k -k. 
\^U RiX — K2J 
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Furthermore we get that Ta.nk{RiX - R2) = Ta,nk{S-^ RiSA{x) - S-'^R2S), where S^'^XS == A{x) 
is a consequence of Lemma [29l The existence of a unique solution X E ¥q [P] is then equivalent 
to the existence of a unique ^ € F^k such that 

rank(S'-ii?iS'A(/i) - S-^R^iS) < ■^--^. 

This is equivalent to the condition that all minors of size [-^^J of S~^RiSA{fi) — S^^R2S are 
zero. This leads to a nonempty system of polynomials in the variable x having a unique solution 
/i G ¥gk . Therefore 

x-fi\ gcd(^^[J; L]s-iR,sA{x)~s-^R2S \J,Le {1, . . . ,fc}L4^J | ,xW - x) . 
Equality follows from the uniqueness of /i. D 

Theorem[32]has the following immediate consequence, which constitutes a step forward towards 
the design of our decoding algorithm. 

Corollary 33. Assume that the received space TZ G 0f {k, n) is uniquely decodable. Then it 
decodes to 

C = rowsp(/ SA{^i)S-^)eS 

where /i G F„fc is a root of all the minors of size [-^^J of S^^RiSA{x) — S~^R2S. 

Under the unique decodability assumption, decoding a received space TZ corresponds to com- 
puting the fi from Corollarv l33l However, computing the greatest common divisor of all the minors 
of SA{x)S~^ of the appropriate size does not constitute an efficient algorithm. 

The following theorem provides a significant computational simplification of this approach. In 
the proof, we give a procedure to construct one minor of SA{x)S~^ of the appropriate size, whose 
factorization we can explicitly describe. In particular, we give explicit formulas for its roots. In 
practice, one wants to proceed as follows: First, find such a minor and write down all of its roots, 
and second, for each root /i check whether rank(5A(/i)S'^^) < [-^^J- 

Theorem 34. Let TZ — rowsp (i?i R2) G 0F,(fc, 2fc) be uniquely decodable with rank(_Ri) > 

rank(_R2) > ~^i "5* G GLk{Pqk) a matrix diagonalizing P and M G G'Lfe(F^fc) such that MS~^ (i?i R2) S 
is in row reduced echelon form. Let R{x) :— MS^^RiSA{x) — MS^^R2S. Then, there exist 
J,i C /:= (l,...,fc) with \J\ = \L\ = [^J - (A: - rank(i?i)) such that 

[J;L\b.(x) = Ai n^^^*' ~^')' 

ieK 

[J\W;L\(z)]fl(o) 

]ii(0) 

if l-i. E F„fc is such that rank(i?(/i)) < ^^, th 



where K ~ J Ci L, fi ~ [J\K;L\ i^]/j(o) G F*^ and /i^ — ' — — G W^k . In particular 



len 



^^e{^.t'U^eK] 



Proof We first focus on the form of the matrix R{x). Let r^ := rank(i?i) for i = 1, 2. We deduce 
by Corollary [25] that the pivots of the matrix MS^^ (i?i R2) S are contained in the first ri 
columns and, since dimTZ = fc, in a choice of fc — ri of the first r2 columns of AJS^^R2S. Figure 
[T]and Figure [21 at page [TBI depict respectively the matrix MS^^ (i?i R2) S and R{x). 

{li, . . . ,lf,_,^ ) C / is the tuple of indices of the columns corresponding to the pivots of 

MS~^R2S. Hence, for all i G {!,..., fc — ri} the entries of columns k of R{x) are all zero 
except for the entry k, which is x''''~^\ and the entry ri + i, which is 1. 
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MS-^RiS 



MS-^R2S 



ri 



/ 









contains fc — ri 
pivots 











^2 



Figure 1: Representation of the matrix MS* ^(i?i R2)S. 



R{x) 



n 



diag(a;, . . . , a;' ^ ) 




+ 




a matrix with 




entries in Ft 

1 1 1 
1 1 . . . 1 






1 1 1 







h k ■■■ I 



k—r\ 



^2 



Figure 2: Representation of the matrix R(x). 
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Now consider the square submatrix R'{x) of R{x) of size 2ri — k defined by the rows and 
columns indexed by 

/':=/\(;i,...,?^_,^,ri + l,...,fc). 

The matrix R'(x) is a matrix containing unknowns only in the diagonal entries. 
Let {^J:L)„,, , be a submatrix of R'{x), then it holds that 

[J,L]wix) ^[JU{ri + l,...,k),LU {h, ■ ■ ■ ,lj,_r^)]R(x)- 

Let /i S F„fc be the unique element satisfying condition Q, by the previous relation it holds 
that 

rank(i?'(M)) < ^ - (fc - n) = ^Il^±_ll, (5) 

This implies that /x is a root of all [J, i]ii;'(a;) such that \J\ = \L\ = [-^^J — (fc — ri). 
Let J',L' C /' be tuples of indices such that 

J'nL' = 0, [J',L']«,(,)^0, and 
[J' U (j), L' U (0]i?'(.) = for any j^lel'MJ'U L'). (6) 

The existence of a couple of tuples satisfying these conditions is ensured by the definition of 
ndrank(i?'(a;)). 

Let K CI'MJ'U V) with \K\ = [%ij - (fc - ri) - \J'\. K is non empty since by © 

, , ,A: + 1, ,~ , 2ri-A;-l ,fc + l, A;-l 

|if I > L^-J - (fc - n) - ^ = L^-J - ^- > 0. 

Define J -.^ J' U K and L :^ i' U if. 

Combining conditions (jHl) and Proposition [^ we obtain that 

[J,L][I'J']-[JUi^),Lumr\i^),I'\{^)]^0 

ioi i E K. It follows by Lemma BOl that the polynomial [J,L] factors as follows 

[J, L]j,^,) ^[J\K,L\ K]j,^o) n (^''' - ^') ■ 

with //■ - [J\(»).£\(»)]fl(o) „^j „ ^ /, ,[*:-«] I ,■ p tA n 

Summarizing, the decoding algorithm that we obtain exploiting Theorem 1341 is as follows: 

1. Find tuples J,L satisfying the assumptions (jB]) of the theorem. Algorithm H] in Section [H 
gives an efficient way to find such tuples. 

2. Write down the roots of the minor [J, i]fl(a;), where R{x) is the matrix in the statement 
of the theorem. Theorem [Ml gives explicit formulas for the roots, so this step requires a 
negligible amount of computation. 

3. For each root /i found in the previous step, check whether the rank of R{fJ.) is smaller than 
or equal to [^y^J . 

4. If the unique decodability assumption is satisfied, exactly one root /i will satisfy the rank 
condition in the previous step. In this case, we decode to rowsp (/ S'A(/i)S'~^). 

5. Else, none of the roots will. In this case, we have a decoding failure. 

We now give the detailed nrinimum-distance decoding algorithm in pseudocode. 
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Algorithm 2: Minimum-distance decoding algoritlim: n = 2k 



input : n = rowsp (i?i R2) £ ©F,(fc, 2k) with (i?i i^a) G F^^", 
P G GLfc(Fq) the companion matrix of p G Fq[x] and 
S G GLk(¥gk) its diagonalizing matrix. 

output: C G S C 0F (fc,") such that d{TZ,C) < k, if such a C exists. 

Let ri :— rank(_Rj) for i ~ 1,2. 
1. 

if either ri — k and S^^Ri R2S is diagonal or ri — and r2 — k then 
I return TZ G S; 
end 



if either ri < K^ or ^2 < K^ then go to 3. 
else go to 4. 



Case ri < -^ 



// the case r2 < ^-^ is analogous 



return rowsp (0 /); 



Case ^2^ < T2 < ri < k II the case ri < r2 is analogous . 

Find M G GLfe(F^fc) such that MS^^(R\ R2)S is in row reduced echelon form; 

R{x) := Af5-ii?iS'A(a;) - MS~^R2S; 

Let /i, . . . , ?j;_^ G {1, . . . , fc} the columns of the pivots of MS^^R2S; 

Let /' := (1, . . \k) \ (li, . . . , /fc_,^, ri + 1, . . . , fc); 

Find J',L' C /' satisfying Condition ^ and set s := |J|; 

Let K Cl'MJ'U V) with l^l = [-^^J - fc + ri - s; 

if i/iere exists an i £ K such that ia.nk{R{fii)) < -^^ then 

return rowsp (/ SA{^i)S^^y, 

else return there exists no C G S such that d{TZ,C) < fc; 
end 
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3.3 A very efficient decoding algorithm for the case Ri non singular 

In this subsection, we focus on the case where the received word 7?. = rowsp (i?i R2) E 
&¥ {k,n) satisfies Ri € GLk{¥q). In this case, we simplify the decoding algorithm and make its 
complexity essentially negligible. 

We start by establishing the mathematical background. Under the assumption that the matrix 
i?i is invertible, an alternative form of Theorem 1321 holds. 

Proposition 35. Let TZ E (&¥ {k,n) be a suhspace with 

k — \ 

— - — < rank(i?2) < rank(ii:i) = k. 

The following are equivalent: 

• TZ is uniquely decodable. 

• There exists a unique ji G ¥„k such that 

rank(A(^) - S-^R^^R2S) = nAiimk{S-^ R^^ R2S) . 

Proof. By Theorem |32] TZ is uniquely decodable if and only if there exists a unique /i e F^t such 
that 

rank(A(/i) - S-^R^^R2S) < ^—^. 

Let A = SA{fi)S-\ then by Corollary [27] 

rank(A - R^^R2) = ndrank(A(/i) - S^^R^^R2S) = ndTa.nk{S^^R^^R2S). 

D 

Our improved decoding algorithm relies on the following corollary. 

Corollary 36. Let TZ = rowsp (Ri R2) G ©f, (fc,") be uniquely decodable with k = rank(i?i) > 
rank(i?2) > -^ and S G GLk{¥qk) a matrix diagonalizing P. Let R{x) := /^{x) — S^^R^ R2S. 
Then, for any choice of tuples of consecutive indices J, L d (1, . . . , fc) such that J Ci L = % and 
\J\ = \L\ = ndrank(S'-ii?;i"^i?25') it holds that for any i E [1, . . . ,k)\{J U L) 

Hence the unique fi E ¥gk from Proposition \35\ is 

\ iJ'^S-^RY^R2S J 

for any choice of i E (1, . . . , fc) \ (J U L). 
Proof. By Proposition 1351 there exists a unique fi for which 

rank(i?(/i)) = ndrank(S'"^i?j;^i?25') < 

Hence it suffices to consider minors of R{x) of size ndrank(5^^i?]^^i?2'S') + 1. 
By Corollary [571 the minor 

[J U (i), L U (i)]fl(,) = [J, iJ^.i^-i^^^xH -[JU{i),LU {i)]s-iR-^H,s 
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ffe-i 



fc-1 



is not identically zero. Hence the root 

makes rank(i?(/i)) — ndra,nk{S^^ R^^ R2S) . By Proposition[2Sl fi yields the unique solution to the 
decoding problem. D 

Remark 37. The previous corollary allows us to design a more efficient decoding algorithm than 
the one presented in |MGR08| , since it does not require the use of the Euclidean Algorithm. More 
precisely, it allows us to find a minor (in fact, many of them) whose roots can be directly computed 
via an explicit formula. Practically, this makes the decoding complexity negligible. 



Algorithm 3: Minimum-distance decoding algorithm: n — 2k, Ri non-singular 

input : 7?. = rowsp (i?i -R2) G ©F<j(fc, 2fc) with either rank(_Ri) = fc or rank(_R2) = k 

P G GLk{Vq) the companion matrix of p G ^q[x] and 

S G GLk{¥gk) its diagonalizing matrix. 
output: C G S C ©F {k,n) such that d(JZ,C) < fc, if such a C exists. 

Let r.i := rank(i?j) for i = 1, 2. 
1. 

if either ri = k and S^^R^ R2S is diagonal or ri = and r2 = k then 
I return 7?. G S; 
end 



if either ri < K^ or r2 < ^^ then go to 3. 
else go to 4. 



Case Ti < ^ 



// the case r2 < ^2"^ is analogous 



return rowsp (0 I); 



Case ri = fc // the case r2 = k is analogous. 



s := rank((l, . . . , [^J); (fc - L^J + 1, • . . , fc)) , 



R{x) := A{x) - S-^R^^R2S; 

li_ 
2 

_ [(l,2,...,^ + l),(l,fc-S,...,fc)lH(0) 

M — [(2,...,s+l),(fc-s,...,fc)]R(o) ' 

if rank {R (^)) < ^ then 

return rowsp (/ 5A(/i)S'^^) G S; 

else return there exists no C G S such that d{TZ, C) < fc; 
end 



4 Algorithms Complexities 

In this section, we compute the complexity of some algorithms that we gave in the previous 
section. 

We start by specifying an algorithm for finding tuples J',L' C /' needed in Step 4 of Algo- 
rithm [21 The algorithm performs only row operations. The pseudocode is given in Algorithm 21 
while correctness is proved in the next lemma. 
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Lemma 38. Let M G F^^ be a non diagonal matrix. Algorithm^ finds two tuples J, i C 
(1, . . . , fc) such that J,L ^ %, J f] L = %, [J,L] ^0 and [J U {j),L U (0] = for any j, I £ 
il,...,k)\iJUL),j^l. 

Proof. We start by setting K — (1, . . . , fc). The algorithm eventuahy terminates since \K\ strictly 
decreases after every cycle of the while loop. Moreover, its complexity is bounded by the complexity 
of the Gaussian elimination algorithm which computes the row reduced echelon form of a matrix 
offnxn i^ 0{¥g;n^) operations. 

We have to prove that the returned tuples J,Lc (1, . . . , fc) satisfy the output conditions. Since 
M is not diagonal, J,L ^%. The emptiness of J n L follows from the fact that J, L are initialized 
to and each time we modify them, we get J^U (j) and LU{1) where j ^ I and j, I are not elements 
of J U L. 

In order to continue we have to characterize the matrix N . The matrix changes as soon as 
we find coordinates j,l £ I with i j^ j for which hji ^ 0. The multiplication PN consists of the 
following row operations 

• the i-th row of PN is the i-th row of N for i < j, and 

• the i-th row of PN is the z-th row of N minus ^^^ times the j-th row of TV, where N — 
{nj.i)i<j,i<k for i > j. 

It follows that the entries of the ^-th column of PN are zero as soon as the row index is bigger 
than j. 

We claim that after each cycle of the while loop it holds that [J, L]jv 7^ 0. We prove it by 
induction on the cardinality of J and L. Since the matrix M is not diagonal, the while loop will 
eventually produce tuples J — (j) and L — (l) with j ^ I such that [J, XJa/ ^ 0. Now suppose 
that we have J, i such that J, i ^ 0, J D L = and [J,L]n 7^ and there exist, following the 
algorithm, entries j,l £ I with j ^ I such that n^x ^ 0. From the previous paragraph, the only 
nonzero entry of the row with index j of ( J U (j); L U (0) Rri which by construction is the last one, 
is Uj^i, hence 

[JU(j),LU(0]w=n,j[J,i]Ar^O. 

In order to conclude that [J, L]j\/ ^ 0, it is enough to notice that the row operations bringing 
[J;M)j^ to [J]M)j^ are rank preserving. 

The property of maximality of the minor [J, L]]\j with respect to containment is a direct 
consequence of the structure of the algorithm. D 

For simplicity, in the following comparisons we give the minimum-distance decoding complexity 
only for the case when the received space TZ G ©f (k, n). This is an upper bound for the complexity 
in the general case. The precise complexity for the case when TZ £ ©f {k,n), k < k may be 
obtained via an easy adaptation of our arguments. 

Complexity of the decoding algorithm 

Algorithm[2]consistsof matrix operations over the extension field Fqfe D F^. The most expensive 
of such operations is the computation of the rank of matrices of size kx k, which can be performed 
via the Gaussian elimination algorithm. The complexities then are as follows: 

• The complexity of step 4. is 0{¥qk; k^), which corresponds to the computation of rank(i?(/i)). 

• The complexity of step 5. is 0{¥„k ; fc*), which corresponds to the computation of rank(i?(^j)) 
for all i £ K, where \K\ < [^J. 

The overall complexity of Algorithm [2] is then 0(¥gk;k'^). This makes the complexity of 
Algorithm [l](!?(F^fc; {n — k)k^). Notice that computing the rank of the matrices Ri has complexity 
0{¥q; {n - k)k'^), which is dominated by 0{¥qk;{n - k)k^). 
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Algorithm 4: Modified Gaussian elimination 



input : Af G F^^*^ non diagonal matrix. 

output: J, L C (1, . . . , fc) such that J, L 7^ 0, J n i = 0, [J, i] 7^ and [J U {j),L U (0] = 
foranyj^/e(l,...,fc)\(JUL). 

J = L = 0, i^ = (1, . . . , fc), i = 1 and A^ = K, Oi<:;V<fc = ^'^; 
while A' 7^ do 
i:=0; 
for Z e A' and I 7^ j do 

if rij^i 7^ and f = then 

J = J U 0'), A == A U (/) and A- = a: \ (j, /); 

'j',i')i<j',/'<fc 
i G / with i > j and Pj'.c = otherwise; 
N = PN; 
t = l; 
end 
end 

if i = then K = K\ (j); 
j = min AT; 
end 
return J, L; 



P = iPj'.i')i<j',i'<k such that pi,i = 1 for any i G {1, . . . , fc}, k,/ = -^ for any 



Comparison with other algorithms and conclusions 

We compare the complexity of Algorithm [T] with other algorithms present in the literature, 
specifically with the algorithms discussed in Proposition 1181 The complexity of the decoding 
algorithm contained in |KK08bj is 0{¥qn-k;n'^). In order to compare the two complexity esti- 
mates, we use the fact that the complexity of the operations on an extension field F^s D ¥q is 
0{¥q; s^). This is a crude upper bound, and the complexity may be improved in some cases (see, 
e.g., |GPS07p . Nevertheless, under this assumption the decoding algorithm from [ KKOSbj has 
complexity 0{¥q;n'^{n - k)^). 

Following similar reasoning, the complexity of the decoding algorithm contained in |SKK08] is 
0(F^-^ k{n - k)), i.e., 0{¥g;k{n ~ kf). 

We conclude that the minimum-distance decoding algorithm presented in this paper has lower 
complexity than the algorithms in iKKOSb] and jSKKOS . whenever k <^ n. Since this is the 
relevant case for the applications, the decoding algorithm that we propose constitutes usually a 
faster option for decoding spread codes. 

5 Conclusions 

In this paper we exhibit a minimum distance decoding algorithm for spread codes which per- 
forms better than other known decoding algorithms for RSL codes when the dimension of the 
codewords is small with respect to the dimension of the ambient space. 

The problem of extending our decoding algorithm to the case when the dimension of the 
received space is bigger than the dimension of the codewords remains open. Another natural 
question arising from this work is finding a generalization of the decoding algorithm to a list 
decoding algorithm. Theorem [31] can be easily extended for this purpose. Yet finding a way 
to solve the list decoding problem which requires neither the computation of a gcd, nor the 
factorization of a minor is a non trivial task. 
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